This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231322e302f32342d3234203d3e203136323736.roa File: 3134372e3132352e3231322e302f32342d3234203d3e203136323736.roa (raw, json) Hash identifier: cFFFQ+Mky8w5k2QcPcJDFWplGSoZxJ2nYQnh5kffkm8= Subject key identifier: FA:0E:FD:8B:6A:3D:24:EB:53:53:D0:A3:D0:24:88:E5:19:A9:02:74 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 5AB87AFF6F4103C1C704972B452C734CF9A0381E Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231322e302f32342d3234203d3e203136323736.roa Signing time: Sat 27 Dec 2025 12:03:55 +0000 ROA not before: Sat 27 Dec 2025 11:58:55 +0000 ROA not after: Sat 26 Dec 2026 12:03:55 +0000 asID: 16276 IP address blocks: 147.125.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b8:7a:ff:6f:41:03:c1:c7:04:97:2b:45:2c:73:4c:f9:a0:38:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 27 11:58:55 2025 GMT Not After : Dec 26 12:03:55 2026 GMT Subject: CN=FA0EFD8B6A3D24EB5353D0A3D02488E519A90274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:fd:16:e8:b5:d1:b1:42:e5:3c:6a:e1:15: e6:1b:77:5c:c3:a5:61:35:49:29:b1:9e:cb:11:69: 1d:db:a2:e3:00:f4:82:22:f6:04:30:38:62:b9:88: 8d:9e:15:d7:e7:8a:a9:18:65:24:93:ca:fa:47:58: a6:97:4e:e6:0f:9e:4a:ee:fc:1d:1e:18:45:a2:1e: db:58:2e:c7:32:67:18:c1:7f:d6:11:22:ab:89:d9: 12:8f:37:4e:c0:85:a7:95:42:bb:a9:60:09:68:11: ff:fc:31:74:b1:a1:42:2a:f9:46:54:aa:ec:b6:76: d2:8d:78:15:bf:bb:57:aa:87:a4:2d:12:3e:e5:68: e1:fa:7b:ec:35:2d:36:29:3a:57:f1:1b:6e:ca:09: 0e:1b:93:c5:1c:d8:61:de:42:d1:2c:32:1a:83:d3: 86:02:c8:ab:e7:d6:06:e5:2d:3c:11:67:d0:73:11: 24:2e:a9:c2:1e:46:59:cc:06:03:75:74:6d:0f:e8: c8:0f:67:67:68:de:31:53:a3:60:d7:f5:34:b4:de: 07:8b:7f:a6:e5:42:31:d7:77:a2:02:12:51:cb:4d: ce:60:59:ef:94:2c:86:8e:b4:9a:1f:a8:36:3b:a2: df:d7:1f:d0:0d:8f:8a:e5:2d:f4:a2:a5:67:78:80: 65:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0E:FD:8B:6A:3D:24:EB:53:53:D0:A3:D0:24:88:E5:19:A9:02:74 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231322e302f32342d3234203d3e203136323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.212.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:d1:a1:30:43:6e:b3:3e:62:11:ae:b7:44:a8:f8:5f:69:d9: 17:87:4d:c2:9a:97:e3:b2:32:37:89:d3:07:f5:c0:b2:89:0c: 41:a0:57:9e:a4:87:be:93:11:bf:d2:9a:09:84:14:ef:19:43: 4d:e3:61:c5:f3:87:bb:cd:9e:f3:9d:26:fe:45:0d:9a:3a:67: e5:3f:92:14:c9:35:b0:dd:af:51:c4:48:0c:d9:5c:d4:00:75: d5:1b:ff:88:63:7f:26:aa:f7:97:09:ba:83:28:cc:cd:32:5f: d4:64:cc:c7:d0:26:9a:fb:d2:bd:7e:23:81:84:d0:30:27:3d: 07:df:2c:5d:11:2c:fd:c5:b2:4a:44:17:1c:7e:f5:c9:65:66: f8:e3:81:f8:db:93:8f:73:66:fe:5a:43:6f:48:61:6d:4b:65: ac:af:41:20:82:c2:f5:12:ee:cd:c6:d9:7f:39:fe:22:4c:2e: 61:88:62:4d:6d:ad:5a:c4:f8:57:ef:65:53:c1:58:de:7c:d1: bf:42:6b:a1:af:2e:aa:85:3b:3f:d9:e4:e4:e0:1c:e8:b5:69: 30:6f:df:37:50:28:95:49:73:ec:15:b0:ac:ab:69:f3:4c:5c: 42:00:c8:ef:01:7b:4d:e8:c6:b8:05:78:d6:9f:b3:16:e3:01: b1:09:df:d0 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUWrh6/29BA8HHBJcrRSxzTPmgOB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMjcxMTU4NTVaFw0yNjEyMjYxMjAzNTVaMDMxMTAvBgNV BAMTKEZBMEVGRDhCNkEzRDI0RUI1MzUzRDBBM0QwMjQ4OEU1MTlBOTAyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBwf0W6LXRsULlPGrhFeYbd1zD pWE1SSmxnssRaR3bouMA9IIi9gQwOGK5iI2eFdfniqkYZSSTyvpHWKaXTuYPnkru /B0eGEWiHttYLscyZxjBf9YRIquJ2RKPN07AhaeVQrupYAloEf/8MXSxoUIq+UZU quy2dtKNeBW/u1eqh6QtEj7laOH6e+w1LTYpOlfxG27KCQ4bk8Uc2GHeQtEsMhqD 04YCyKvn1gblLTwRZ9BzESQuqcIeRlnMBgN1dG0P6MgPZ2do3jFTo2DX9TS03geL f6blQjHXd6ICElHLTc5gWe+ULIaOtJofqDY7ot/XH9ANj4rlLfSipWd4gGWpAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU+g79i2o9JOtTU9Cj0CSI5RmpAnQwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy MzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzYzMjM3MzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfdQwDQYJKoZIhvcNAQELBQADggEBAErRoTBDbrM+YhGut0So+F9p2ReHTcKa l+OyMjeJ0wf1wLKJDEGgV56kh76TEb/SmgmEFO8ZQ03jYcXzh7vNnvOdJv5FDZo6 Z+U/khTJNbDdr1HESAzZXNQAddUb/4hjfyaq95cJuoMozM0yX9RkzMfQJpr70r1+ I4GE0DAnPQffLF0RLP3FskpEFxx+9cllZvjjgfjbk49zZv5aQ29IYW1LZayvQSCC wvUS7s3G2X85/iJMLmGIYk1trVrE+FfvZVPBWN580b9Ca6GvLqqFOz/Z5OTgHOi1 aTBv3zdQKJVJc+wVsKyrafNMXEIAyO8Be03oxrgFeNafsxbjAbEJ39A= -----END CERTIFICATE-----Generated at Sun Jan 25 08:00:29 2026 by rpki-client